Technical Paper: Integrating Splunk with Jamf Pro and Jamf Protect

Solution
Application
Content Type: Technical Documentation
Utilities & Services
ft:locale: English

Overview
Jamf Pro Integration
Integrating Splunk with Jamf Pro
General Requirements
Installing the Jamf Pro Add-on for Splunk
Configuring the Jamf Pro Add-on for Splunk
Confirming Data Collection
Input Settings for the Jamf Pro Add-on for Splunk
Searching Jamf Pro Data in Splunk
Basic Search Components
Creating a Dashboard for Jamf Protect Data in Splunk
Customizing the Dashboard for Jamf Pro
Jamf Pro Search and Visualization Examples
Jamf Pro Webhooks for Splunk
Configuring Splunk to Collect Webhooks
Configuring Webhooks in Jamf Pro
Jamf Protect Integration
Integrating macOS Security with Splunk
macOS Security and Splunk Integration Requirements
Installing the Jamf Protect Add-on for Splunk
Creating HTTP Event Collectors and Tokens in Splunk
Creating an Event Collector for Alerts and Unified LogsCreating an Event Collector for Unified Logs
Modifying Alert Event TypesModifying Unified Log Event Types
Creating an Event Collector for Telemetry Data
Testing Your Splunk Event Collector Token
Creating an Jamf Protect Action Configuration for Splunk
Searching macOS Security Data in Splunk
Creating a Dashboard for Jamf Protect Data in Splunk
Customizing the Dashboard for Jamf Protect
Jamf Protect Search and Visualization Examples
Copyright and Trademarks

Back to home page